Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
File: YsuMEjOwFrHwSBCJc9asPnYvY-0.mft (raw, json)
Hash identifier: DYPuY3D1xbyDhmPKaiHfne6PWplkx0GFE4cfqXfcpr8=
Subject key identifier: E3:EC:54:45:0B:6D:94:2C:52:F4:26:24:A1:88:69:68:B5:E7:04:D5
Authority key identifier: 62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
Certificate issuer: /CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Certificate serial: 019D2772B748BFEEA0A1A2D3F50C5A516411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
Manifest number: 142E
Signing time: Thu 26 Mar 2026 00:02:02 +0000
Manifest this update: Thu 26 Mar 2026 00:02:02 +0000
Manifest next update: Fri 27 Mar 2026 00:02:02 +0000
Files and hashes: 1: YsuMEjOwFrHwSBCJc9asPnYvY-0.crl (hash: vTLDTE9v820wTo1eqwmxVF6Sm/mZPZxq2dQsuJeLJ60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b7:48:bf:ee:a0:a1:a2:d3:f5:0c:5a:51:64:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Validity
Not Before: Mar 26 00:02:02 2026 GMT
Not After : Mar 27 00:02:02 2026 GMT
Subject: CN=e3ec54450b6d942c52f42624a1886968b5e704d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:70:48:f4:a8:b4:e0:89:a9:30:51:75:d2:
c6:5f:71:ea:1a:7e:47:e1:98:39:e4:34:9b:c3:62:
6f:d9:09:35:dc:b8:a8:c9:73:82:bf:e2:45:ed:c8:
c9:fc:1d:83:54:7c:d7:ae:e3:4a:d7:49:7e:d3:2e:
84:dd:e5:23:e1:79:fd:66:0e:19:3e:39:9b:58:0e:
65:0a:7f:6b:0c:be:87:94:ba:68:e9:ad:14:70:67:
f5:ed:27:e1:96:34:20:d0:4d:4f:eb:d4:83:0f:4d:
26:27:6e:89:9d:b9:0b:bc:43:2f:50:9a:d3:56:f1:
b0:c9:50:d6:48:5d:02:5f:5f:38:23:c6:b7:46:77:
f6:02:ca:eb:96:55:1f:2d:ef:ec:e5:e4:67:9d:71:
03:e6:0b:cb:1c:5e:49:7e:18:89:ec:47:d1:02:e0:
c9:83:b6:ee:0a:de:03:fa:c8:96:c9:7d:e6:a4:fa:
27:65:73:a5:02:20:49:f1:c8:70:6c:16:ad:c8:0f:
fb:f1:5c:95:b0:d8:b7:45:5b:a4:b0:e7:b8:ea:32:
ba:60:49:11:51:2f:e5:30:06:be:c4:3a:6f:8d:cb:
44:e1:00:f5:1e:ad:85:de:05:0a:60:96:4e:c9:f4:
2b:3c:b8:2d:35:93:91:2f:1b:0a:13:65:50:cf:12:
bc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EC:54:45:0B:6D:94:2C:52:F4:26:24:A1:88:69:68:B5:E7:04:D5
X509v3 Authority Key Identifier:
keyid:62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:77:81:00:fe:bf:25:75:94:d9:b7:b3:d5:27:80:a8:7a:fd:
24:02:5a:02:ee:d9:01:29:7e:08:5f:33:54:c9:96:50:6b:a5:
87:d2:21:15:20:1a:b3:c1:6d:70:be:60:3d:01:98:4b:59:93:
0c:52:38:95:b0:ee:14:95:0c:93:5f:6b:37:7e:70:a9:4d:61:
f1:dc:e1:2b:ff:fc:24:23:d4:1d:4c:26:7e:e4:ba:c1:98:1f:
f0:ad:83:d0:fc:af:20:29:cf:79:ab:7a:29:44:2b:6b:a7:db:
be:4b:df:1a:37:a1:8d:9d:3a:24:d6:9e:05:8f:49:c9:99:61:
e5:76:4d:a8:ba:67:3d:42:b8:6f:d2:61:32:8d:80:13:36:d5:
85:4d:46:9d:c0:55:30:a7:be:69:79:24:41:53:d4:58:b0:3b:
a0:9b:99:89:8c:b7:d5:7a:30:7b:14:ad:7b:79:a5:17:ed:35:
25:c2:fd:93:e3:6e:f2:33:ae:f8:f1:92:23:e7:e1:3b:2d:93:
83:c7:07:f4:37:c9:e8:38:70:79:5a:63:90:04:12:8a:de:9b:
a8:48:b2:5b:56:09:82:3c:48:69:0b:ef:a7:81:38:9a:e5:49:
d1:eb:fd:6a:78:bb:42:70:da:57:b2:d4:6a:ee:ba:34:c0:f2:
4f:e6:fd:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncrdIv+6goaLT9QxaUWQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyY2I4YzEyMzNiMDE2YjFmMDQ4MTA4OTczZDZhYzNlNzYy
ZjYzZWQwHhcNMjYwMzI2MDAwMjAyWhcNMjYwMzI3MDAwMjAyWjAzMTEwLwYDVQQD
EyhlM2VjNTQ0NTBiNmQ5NDJjNTJmNDI2MjRhMTg4Njk2OGI1ZTcwNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O9wSPSotOCJqTBRddLGX3HqGn5H
4Zg55DSbw2Jv2Qk13LioyXOCv+JF7cjJ/B2DVHzXruNK10l+0y6E3eUj4Xn9Zg4Z
PjmbWA5lCn9rDL6HlLpo6a0UcGf17SfhljQg0E1P69SDD00mJ26JnbkLvEMvUJrT
VvGwyVDWSF0CX184I8a3Rnf2AsrrllUfLe/s5eRnnXED5gvLHF5JfhiJ7EfRAuDJ
g7buCt4D+siWyX3mpPonZXOlAiBJ8chwbBatyA/78VyVsNi3RVuksOe46jK6YEkR
US/lMAa+xDpvjctE4QD1Hq2F3gUKYJZOyfQrPLgtNZORLxsKE2VQzxK85QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPsVEULbZQsUvQmJKGIaWi15wTVMB8GA1UdIwQY
MBaAFGLLjBIzsBax8EgQiXPWrD52L2PtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXN1TUVqT3dGckh3U0JDSmM5YXNQbll2WS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80MDJlZWEtNDgxNC00ODc3LThkN2Et
M2NhMmY3OTZiNTk2LzEvWXN1TUVqT3dGckh3U0JDSmM5YXNQbll2WS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80MDJlZWEtNDgxNC00ODc3LThkN2EtM2NhMmY3OTZiNTk2
LzEvWXN1TUVqT3dGckh3U0JDSmM5YXNQbll2WS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXeBAP6/
JXWU2bez1SeAqHr9JAJaAu7ZASl+CF8zVMmWUGulh9IhFSAas8FtcL5gPQGYS1mT
DFI4lbDuFJUMk19rN35wqU1h8dzhK//8JCPUHUwmfuS6wZgf8K2D0PyvICnPeat6
KUQra6fbvkvfGjehjZ06JNaeBY9JyZlh5XZNqLpnPUK4b9JhMo2AEzbVhU1GncBV
MKe+aXkkQVPUWLA7oJuZiYy31XowexSte3mlF+01JcL9k+Nu8jOu+PGSI+fhOy2T
g8cH9DfJ6DhweVpjkAQSit6bqEiyW1YJgjxIaQvvp4E4muVJ0ev9ani7QnDaV7LU
au66NMDyT+b9tw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:32 2026 by rpki-client